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DETAILED ACTION 

1 . This is in response to the Amendment filed on 6/13/2005. Claims 1-44 are 
presented for examination. 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

3. Claims 1-44 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Gudjonsson et al., US pat. No.6,564,261 (hereafter Gudjonsson). 

As to claim 1 , Gudjonsson discloses a method for mapping a user in a heterogeneous 
network comprising: 

receiving on a computer in a first network a user name (each user 7 has a 
globally unuiqe identity) associated with a user (user 7 fig.6) in the first network (first 
cluster 1 ), mapping the user name to a user name associated with the user in a second 
network (other cluster 1 fig.6) and mapping the user name associated with the same 
user (user 7 in other cluster) in the second network (other cluster 1 of fig.6) to a user 
identification number (user ID or UID) associated with the user in the second network 
[establishing sessions between the same user when moving into two clusters 
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(networks), see abstract, figs.1 , 6, col.1 1 line 21 to col. 12 line 54]. 

As to claims 2 and 3, Gudjonsson discloses accessing resources on a computer in the 
second network using the user identification number and authenticating the user after 
the mappings (using authentication sen/ice that handles clients' access to the clusters 
1, see col. 11 lines 5-64). 

As to claims 4-6, Gudjonsson discloses that first network uses a personal computer 
based operating system, the second network uses a UNIX based operating system and 
a gateway (25 fig.1 1) (see fig.1 1, col.15 lines 13-64 and col.16 lines 7-67 and col.38 
lines 21-43). 

As to claims 7-9, Gudjonsson discloses a client (user 7 fig.6), a map on a mapping 
server (fig.1 1) and mapping including using remote procedure calls (see fig.1 1 , col.15 
lines 13-64 and col.16 lines 7-67). 

As to claim 10, Gudjonsson discloses the remote procedure calls comprise at leastone 
remote procedure call selected from the group consisting of getting credentials, 
authenticating using credentials, checking map status, and dumping maps remote 
procedure calls (see fig.1 1 , col.15 lines 13-64, col.16 lines 7-67 and col.18 lines 15-67). 
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As to claim 1 1 , Gudjonsson discloses a computer-readable medium storing computer- 
executable instructions to map a user name associated with a user (user 7 of fig.6) in a 
first network (cluster 1 fig.6) to a user name associated with a user in a second network 
(other cluster 1 of fig.6) and to map the user name associated with the user in the 
second network to a user identification number (user ID or UID) associated with the 
user in the second network (establishing sessions between two networks, see abstract, 
figs.1, 6, col. 11 line 21 to col. 12 line 54). 

As to claim 12, Gudjonsson discloses a graphical user interface a (standard GUI 
program with a persistent connection to the server, see col. 34 lines 26-55). 

As to claim 13, Gudjonsson discloses a method for mapping a user in a heterogeneous 
network comprising: receiving on a computer in a first network (cluster 1 fig.6) a user 
name and a password (user 7 of fig.6) associated with a user in a second network 
(other cluster 1 fig.6); authenticating the user using the user name and the password to 
produce an authenticated user (using authentication service that handles clients' access 
to the clusters 1 , see col.1 1 lines 5-64) and mapping the authenticated user to a user 
identification number associated with the user in a second network (establishing 
sessions for a user when connecting between two networks, see abstract, figs.1 , 6, 
col.1 1 line 21 to col. 12 line 54). 
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Claim 14 is rejected for the same reasons set forth in claim 2. 

As to claims 1 5-1 8, Gudjonsson discloses the first network performing the 
authenticating, mapping, using a personal computer based operating system and a 
UNIX based operating system (see fig.11, col.15 lines 13-64 and col.16 lines 7-67 and 
col.38 lines 21-43). 

Claims 19-23 are rejected for the same reasons set forth in claims 6-10 respectively. 

As to claim 24, Gudjonsson discloses a computer-readable medium storing computer 
instructions to receive on a computer network (cluster 1 fig.6) a user name (user 7 fig.6) 
and a password associated with a user (user 7 in other cluster 1 of fig.6) in a second 
network (other cluster 1 fig.6), to authenticate the user using the user name and the 
password to produce an authenticated user (using authentication service that handles 
clients' access to the clusters 1 , see col.1 1 lines 5-64) and to map the authenticated 
user to a user identification number associated with the user in a second network 
(establishing sessions for a user when connecting between two networks, see abstract, 
figs.1,6, col.1 1 line 21 to col. 12 line 54). 

Claim 25 are rejected for the same reasons set forth in claim 12. 

As to claim 26, Gudjonsson discloses a method for mapping a user in a heterogeneous 
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network comprising: receiving on a computer in a second network (cluster 1 fig.6) a user 
identification number (receiving a User ID or UID) associated with a user (user 7 fig.6) in 
a first network (other cluster 1 fig.6) and mapping the user identification number to a 
user name associated with the same user (same user 7 in other cluster 1 fig.6) in the 
second network (other cluster 1 fig.6) (establishing and mapping sessions for a user 
when connecting between two networks, see abstract, figs.1 , 6, col.1 1 line 21 to col. 12 
line 54 and col.30 line 61 to col.31 line 58), wherein the user's user identification 
number maps to more than one user name for the user in the heterogeneous network 
(see col.12 line 41 to col. 13 line 42). 

As to claim 27, Gudjonsson discloses accessing resources on a computer in the second 
network using the user name (see fig.1 1, col.15 lines 13-64 and col. 18 lines 15-67). 

Claims 28-36 are rejected for the same reasons set forth in claims 1 5-23 respectively. 
Claims 37 and 38 are rejected for the same reasons set forth in claims 24 and 25 
respectively. 

As to claim 39, Gudjonsson discloses a method for mapping a user in a heterogeneous 
network comprising: receiving on a computer in a first network (cluster 1 fig.6) a user 
name associated with a user (user 7 fig.6) in the first network; mapping the user name 
to a user name associated with the user in a second network (other cluster 1 of fig.6) 
and mapping the user name associated with the same user (same user 7 in other 
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cluster 1 fig.6) in the second network to a user identification number (UID or User ID) 
associated with the user in the second network, wherein the mapping includes using a 
map on a mapping server and the mapping server maintains a default map, a simple 
map and/or explicit maps that provide override (establishing and mapping sessions 
between two networks, see abstract, figs. 6, 1 1 , col.1 1 line 21 to col. 12 line 54 and 
col. 18 lines 15-67); wherein the user's user identification number maps to more than 
one user name for the user in the heterogeneous network (see col. 12 line 41 to col. 13 
line 42 and col. 16 lines 7-47). 

As to claim 40, Gudjonsson discloses algorithms for unmapping users, mapping multiple 
users and/or group mapping (mapping or deleting users from clusters or networks, see 
col.28 lines 21-64 and col. 31 line 22 to col.32 line 60). 

As to claim 41 , Gudjonsson discloses a method for mapping a user in a heterogeneous 
network comprising: receiving on a computer in a first network (cluster 1 fig.6) a user 
name and a password associated with a user in a second network and authenticating 
the user using the user name and the password to produce an authenticated user; 
(using authentication service that handles clients' access to the clusters 1 , see col. 1 1 
lines 5-64) and mapping the authenticated user to a user identification number 
associated with the user in a second network (other cluster of fig.6) wherein the 
mapping includes using a map on a mapping server and the mapping server maintains 
a default map, a simple map and/or explicit maps that provide override (establishing and 
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mapping sessions between two networks, see abstract, figs. 6, 1 1 , col.1 1 line 21 to 
col. 12 line 54 and col.18 lines 15-67). 

As to claim 42, Gudjonsson discloses algorithms for unmapping users, mapping multiple 
users and/or group mapping (mapping or deleting users from clusters or networks, see 
col.28 lines 21-64 and col.31 line 22 to col.32 line 60). 

Claims 43 and 44 are rejected for the same reasons set forth in claims 39 and 40 
respectively. 

Response to Arguments 

4. Applicant's arguments filed on 6/1 3/2005 have been fully considered but they are 
not persuasive. 

• Applicant asserts that Gudjonsson does not disclose every element of claim 
1. 

Examiner respectfully disagrees. Examiner point out that Gudjonsson DOES 
disclose a method for mapping a user in a heterogeneous network comprising: 
receiving on a computer in a first network (cluster 1 offig.6) a user name (each user 7 
has a globally unique identity) associated with a user (user 7 fig.6) in the first network 
(first cluster 1), mapping the user name to a user name associated with the user in a 
second network (other cluster 1 fig.6) and mapping the user name associated with the 
same user (user 7 in other cluster) in the second network (other cluster 1 offig.6) to a 
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user identification number (user ID or UID) associated with the user in the second 
network [establishing sessions between the same user when moving into two clusters 
(networks), see abstract, figs. 1, 6, col. 1 1 line 21 to col. 12 line 54]. Examiner 
respectfully point out that the same user (user 7) utilize the same user name when 
connecting to the two networks. This is equivalent to what is claimed. 

• Applicant asserts that Gudjonsson does not disclose accessing resources on 
a computer in the second network using the user identification number and 
authenticating the user after the mappings. 

Examiner point out that Gudjonsson discloses accessing resources on a 
computer in the second network using the user identification number (using 
user's identity or Ids or Globally unique identity) and authenticating the user after 
the mappings (using authentication service that handles client's (7's fig.6) access 
to the two network clusters 1 of fig.6, see col. 1 1 lines 5-64). 

• Applicant asserts that Gudjonsson does not disclose mapping including using 
remote procedure calls. 

Gudjonsson discloses mapping including using remote procedure calls 
(connecting and mapping remote users to Intra-cluster servers using session 
initiation protocol, see fig. 1 1, col. 15 lines 13-64 and col. 16 lines 7-67). 
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• Applicant asserts that Gudjonsson does not disclose every element of claim 
13. 

Examiner point out that Gudjonsson discloses a method for mapping a user in a 
heterogeneous network comprising: receiving on a computer in a first network 
(cluster 1 fig. 6) a user name and a password (user 7 of fig. 6) (prompting for user 
ID and password when connecting to a server) associated with a user in a 
second network (other cluster 1 fig.6), authenticating the user using the user 
name and the password (using user ID or globally unique Ids) to produce an 
authenticated user (using authentication service that handles clients' access to 
the clusters 1, see col. 1 1 lines 5-64) and mapping the authenticated user to a 
user identification number associated with the user in a second network 
(establishing sessions for a user when connecting between two networks, see 
abstract, figs. 1, 6, col. 1 1 line 21 to col. 12 line 54). 

• Applicant asserts that Gudjonsson does not disclose accessing resources on 
a computer in the second network using the user identification number and 
authenticating the user after the mappings. 

Examiner point out that Gudjonsson discloses accessing resources on a 
computer in the second network (other cluster 1 of fig.6) using the user 
identification number (using user's identity or Ids or Globally unique identity) and 
authenticating the user after the mappings (using authentication service that 
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handles client's (7's fig. 6) access to the two network clusters 1 offig.6, see col. 11 
lines 5-64). 

• Applicant asserts that Gudjonsson does not disclose a computer in a first 
network performing the authenticating. 

Gudjonsson discloses a computer in the first network performing the 
authenticating (using authentication service that handles client's (7's fig. 6) 
access to the two network clusters 1 offig.6, see col. 11 lines 5-64 and col. 16 
lines 7-67 and col.38 lines 21-43). 

• Applicant asserts that Gudjonsson does not disclose mapping an 
authenticated user to a user identification number 

Examiner point out that Gudjonsson discloses using user's identity or Ids or 
Globally unique identity for connecting and mapping remote users to Intra-cluster 
servers (see fig. 1 1, col. 15 lines 13-64 and col. 1 1 lines 5-64). 

• Applicant asserts that Gudjonsson does not disclose using the user's user 
identification number maps to more than one user name for the user in the 
heterogeneous network. 

Examiner point out that Gudjonson discloses the user's user identification 
number maps to more than one user name for the user in the heterogeneous network 
(see col. 12 line 41 to col. 13 line 42) as rejected above. 
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• Applicant asserts that Gudjonsson does not disclose every element of claim 
39. 

Gudjonsson discloses a method for mapping a user in a heterogeneous network 
comprising: receiving on a computer in a first network (cluster 1 fig.6) a user name 
associated with a user (user 7 fig.6) in the first network; mapping the user name to a 
user name associated with the user in a second network (other cluster 1 of fig.6) and 
mapping the user name associated with the same user (same user 7 in other cluster 1 
fig.6) in the second network to a user identification number (UID or User ID) associated 
with the user in the second network, wherein the mapping includes using a map on a 
mapping server and the mapping server maintains a default map, a simple map and/or 
explicit maps that provide override (establishing and mapping sessions between two 
networks, see abstract, figs. 6, 1 1, col. 1 1 line 21 to col. 12 line 54 and col. 18 lines 15- 
67); wherein the user's user identification number maps to more than one user name for 
the user in the heterogeneous network (see col. 12 line 41 to col. 13 line 42). For 
example, in figure 12(a), Gudjonsson also discloses that each user server (US) 19 is 
given a user server ID (a USID). It is the role of the user mapping function (UMF) 25 to 
map local UIDs (local by the fact that their CID is the local cluster identifier) to USIDs. 
The mapping mechanism in Gudjonsson may work in certain embodiments of this 
invention and is dynamic since it can change if a user server crashes, is removed, or if a 
user server is added. Therefore, Gudjonsson anticipated the applicant's claimed 
invention of "default, simple and/or map override". 
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Therefore, the examiner asserts that cited prior art teaches or suggests the 
subject matter broadly recited in independent claims 1, 11, 13, 24, 26, 37, 39, 41 and 
43. Claims 2-10, 12, 14-23, 25, 27-36, 40, 42 and 44 are also rejected at least by virtue 
of their dependency on independent claims and by other reasons set forth in the 
previous office action [mailed on 2/11/2005]. Accordingly, claims 1-44 are respectfully 
rejected. 

Conclusion 

5. Claims 1-44 are rejected. 

6. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Khanh Dinh whose telephone number is (571) 272- 
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3936. The examiner can normally be reached on Monday through Friday from 8:00 A.m. 
to 5:00 P.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Zarni Maung, can be reached on (571 ) 272-3939. The fax phone number 
for this group is (571 ) 273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval IPAIRI system. Status information for published 
applications may be obtained from either Private PMR or Public PMR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-21 7-91 97 (toll-free). 




Khanh Dinh 
Patent Examiner 
Art Unit 21 51 
8/17/2005 



